From 9df2a572bd0c29627b3b8e5d0398dbb3d304614e Mon Sep 17 00:00:00 2001
From: Alex Macocian <amacocian@yahoo.com>
Date: Mon, 28 Jul 2025 22:54:04 +0200
Subject: [PATCH] Remove some extra metricbeat fields

---
 metricbeat/metricbeat.yml | 23 +++++++++++++++++++++--
 1 file changed, 21 insertions(+), 2 deletions(-)

diff --git a/metricbeat/metricbeat.yml b/metricbeat/metricbeat.yml
index aed4a6a..e93e237 100644
--- a/metricbeat/metricbeat.yml
+++ b/metricbeat/metricbeat.yml
@@ -58,6 +58,25 @@ output.elasticsearch:
 # ================================= Processors =================================
 processors:
   - add_host_metadata: ~
-  - add_cloud_metadata: ~
   - add_docker_metadata: ~
-  - add_kubernetes_metadata: ~
\ No newline at end of file
+  - drop_fields:
+      ignore_missing: true
+      fields:
+        - container.labels
+        - system.process.cgroup
+        - system.process.io
+        - auditd.log
+        - aws
+        - azure
+        - cef
+        - checkpoint
+        - cisco
+        - crowdstrike
+        - dll
+        - file
+        - fortinet
+        - gcp
+        - google
+        - haproxy
+        - juniper
+        - microsoft
\ No newline at end of file